CN110801630B - Method, device, equipment and storage medium for determining cheating program - Google Patents
Method, device, equipment and storage medium for determining cheating program Download PDFInfo
- Publication number
- CN110801630B CN110801630B CN201911066373.8A CN201911066373A CN110801630B CN 110801630 B CN110801630 B CN 110801630B CN 201911066373 A CN201911066373 A CN 201911066373A CN 110801630 B CN110801630 B CN 110801630B
- Authority
- CN
- China
- Prior art keywords
- program
- target
- cheating
- determining
- verified
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/70—Game security or game management aspects
- A63F13/75—Enforcing rules, e.g. detecting foul play or generating lists of cheating players
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Abstract
The embodiment of the invention provides a method, a device, equipment and a storage medium for determining a cheating program, wherein the method comprises the following steps: acquiring names of target programs running on each terminal device, wherein the target programs are programs running while the terminal device runs a target game; counting the occurrence times of the target programs on each terminal device based on the names of the target programs to obtain the corresponding counting number of the target programs; acquiring the number of search results corresponding to the names of the target programs; and determining whether the target program is a cheating program based on the corresponding statistical number of the target program and the search result number. According to the technical scheme provided by the embodiment of the invention, whether the target program is the cheating program can be determined efficiently and accurately, and the labor cost is obviously reduced.
Description
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, a device, and a storage medium for determining a cheating program.
Background
With the development of internet technology, more and more people play games through the internet, and a plurality of cheating programs applied to the online games also appear, and how to conveniently determine the cheating programs applied to the online games becomes a focus of attention.
In one technical scheme, program features of a suspicious cheating program are analyzed and judged to determine whether the suspicious cheating program is a cheating program, for example, one or more sections of codes in the suspicious cheating program are analyzed and judged to determine whether the suspicious program is the cheating program according to the characteristics of the codes.
However, in this technical solution, since the suspicious cheating program is directly analyzed, not only professional computer security knowledge is required, but also the operation principle of the suspicious program is required to be understood, and the technical level requirements of the practitioner are high, resulting in high labor cost.
Disclosure of Invention
The embodiment of the invention provides a method, a device, equipment and a storage medium for determining a cheating program, which are used for solving the problems of higher technical level requirements on practitioners and higher labor cost caused by directly analyzing a suspicious cheating program.
In a first aspect of the embodiment of the present invention, there is provided a method for determining a cheating program, including: acquiring the names of target programs running on each terminal device, wherein the target programs are programs running at the same time when the terminal device runs a target game; counting the occurrence times of the target programs on the terminal equipment based on the names of the target programs to obtain the corresponding counting number of the target programs; acquiring the number of search results corresponding to the names of the target programs; and determining whether the target program is a cheating program or not based on the statistical number corresponding to the target program and the search result number.
In some embodiments of the present invention, based on the above-mentioned scheme, the determining whether the target program is a cheating program based on the statistical number corresponding to the target program and the search result number includes: carrying out weighted summation operation on the statistical number corresponding to the target program and the search result number; and if the result of the weighted summation operation is smaller than a preset threshold value, determining that the target program is a cheating program.
In some embodiments of the present invention, based on the above-mentioned scheme, the determining whether the target program is a cheating program based on the statistical number corresponding to the target program and the search result number includes: determining the probability that the target program is a cheating program based on the statistics number corresponding to the target program and the search result number by the following formula,
P＝1-K1*min(a/A,1)-K2*min(b/B,1)
wherein P is the probability that the target program is a cheating program, a is the statistical number, B is the search result number, A is an empirical value corresponding to the statistical number, B is an empirical value corresponding to the search result number, K1 is a weight corresponding to the statistical number, K2 is a weight corresponding to the search result number, and K2 is greater than K1.
In some embodiments of the present invention, based on the above scheme, the method further includes: if the target program is determined to be the cheating program to be verified, acquiring the searched program information of the cheating program to be verified, wherein the program information comprises one or more of name information of the cheating program to be verified, description information of the cheating program to be verified and comment information of the cheating program to be verified; and verifying whether the cheating program to be verified is the cheating program based on the program information.
In some embodiments of the present invention, based on the above-mentioned scheme, the verifying whether the cheating program to be verified is a cheating program based on the program information includes: performing word segmentation processing on the program information of the cheating program to be verified to obtain a corresponding word vector; determining the similarity between each word vector and each word vector of program information of a preset cheating program; determining a target word vector with the similarity greater than a predetermined similarity threshold; and if the number of the target word vectors is greater than a preset number threshold, determining that the cheating program to be verified is a cheating program.
In some embodiments of the present invention, based on the above scheme, the method further includes: if the target program is determined to be the cheating program to be verified, acquiring operation data of the cheating program to be verified on each terminal device; comparing the operation data with standard operation data corresponding to the target game; and verifying whether the cheating program to be verified is the cheating program based on the comparison result.
In some embodiments of the present invention, based on the above scheme, the method further includes: searching the name of each target program through a search engine or an application program database; the number of search results corresponding to the name of each of the target programs is determined based on the search results.
In a second aspect of the embodiment of the present invention, there is provided a cheating program determining apparatus, including: the name acquisition module is used for acquiring names of target programs running on each terminal device, wherein the target programs are programs running at the same time when the terminal device runs a target game; the name statistics module is used for respectively counting the occurrence times of the target programs on the terminal equipment based on the names of the target programs to obtain the corresponding statistics numbers of the target programs; the search result determining module is used for obtaining the number of search results corresponding to the names of the target programs; and the cheating determining module is used for determining whether the target program is a cheating program or not based on the statistical number corresponding to the target program and the search result number.
In some embodiments of the present invention, based on the above-described scheme, the cheating determining module includes: the weighting operation unit is used for carrying out weighted summation operation on the statistical number corresponding to the target program and the search result number; and the determining unit is used for determining that the target program is a cheating program if the result of the weighted summation operation is smaller than a preset threshold value.
In some embodiments of the invention, based on the above-described scheme, the cheating determination module is configured to: determining the probability that the target program is a cheating program based on the statistics number corresponding to the target program and the search result number by the following formula,
P＝1-K1*min(a/A,1)-K2*min(b/B,1)
wherein P is the probability that the target program is a cheating program, a is the statistical number, B is the search result number, A is an empirical value corresponding to the statistical number, B is an empirical value corresponding to the search result number, K1 is a weight corresponding to the statistical number, K2 is a weight corresponding to the search result number, and K2 is greater than K1.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the information acquisition module is used for acquiring the program information of the searched cheating program to be verified if the target program is determined to be the cheating program to be verified, wherein the program information comprises one or more of name information of the cheating program to be verified, description information of the cheating program to be verified and comment information of the cheating program to be verified; and the verification module is used for verifying whether the cheating program to be verified is a cheating program or not based on the program information.
In some embodiments of the present invention, based on the above scheme, the verification module includes: the word vector generation unit is used for carrying out word segmentation on the program information of the cheating program to be verified to obtain a corresponding word vector; a similarity determining unit configured to determine a similarity between each of the word vectors and each of the word vectors of program information of a predetermined cheating program; determining a target word vector with the similarity greater than a predetermined similarity threshold; and the threshold judging unit is used for determining that the cheating program to be verified is a cheating program if the number of the target word vectors is larger than a preset number threshold.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the operation data acquisition module is used for acquiring operation data of the cheating program to be verified on each terminal device if the target program is determined to be the cheating program to be verified; the data comparison unit is used for comparing the operation data with standard operation data corresponding to the target game; and the result verification unit is used for verifying whether the cheating program to be verified is the cheating program or not based on the comparison result.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the name searching module is used for searching the names of the target programs through a search engine or an application program database; and the number determining module is used for determining the number of the search results corresponding to the names of the target programs based on the search results.
In a third aspect of the embodiment of the present invention, there is provided a cheating program determining apparatus, including: a receiver, a processor, a memory, and a transmitter; the memory is used for storing computer programs and data, and the processor calls the computer programs stored in the memory to execute the cheating program determining method provided by any embodiment of the first aspect.
A fourth aspect of the invention provides a computer readable storage medium comprising a computer program for performing the cheating program determination method provided by any of the embodiments of the first aspect when executed by a processor.
According to the cheating program determining method, device, equipment and storage medium provided by the embodiment of the invention, the occurrence times of the same target program running on each terminal equipment running the target game are counted, search result data corresponding to the names of the target programs are obtained, and whether the target program is the cheating program is determined by combining the occurrence times of the target program and the number of the search results. On the one hand, the number of the same target programs running on each terminal device running the target game is counted, so that the occurrence times of each target program on a plurality of terminal devices can be efficiently determined; on the other hand, whether the target program is the cheating program is determined by combining the counted occurrence times of the target program and the search result number, and the program content of the target program is not required to be analyzed, so that whether the target program is the cheating program can be determined efficiently and accurately, and the labor cost is obviously reduced.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions of the prior art, the drawings that are needed in the embodiments or the description of the prior art will be briefly described below, it will be obvious that the drawings in the following description are some embodiments of the present invention, and that other drawings can be obtained according to these drawings without inventive effort to a person skilled in the art.
Fig. 1 is a schematic diagram of an application scenario of a method for determining a cheating program according to some embodiments of the present invention;
FIG. 2 is a flow chart of a method for determining a cheating program according to some embodiments of the present invention;
FIG. 3 is a flow chart of verifying a target program according to some embodiments of the invention;
FIG. 4 is a schematic flow chart of verification of a target program according to other embodiments of the present invention;
FIG. 5 is a schematic block diagram of a cheating program determination apparatus provided in accordance with some embodiments of the present invention;
FIG. 6 is a schematic block diagram of a cheating determination module provided in accordance with some embodiments of the present invention;
fig. 7 is a schematic block diagram of an embodiment of a cheating program determination apparatus provided in accordance with some embodiments of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
In the current technical scheme for identifying whether the target program is the cheating program, on one hand, the technical level requirement on the practitioner is higher, so that the labor cost is higher; on the other hand, the problems of low recognition efficiency and inaccurate recognition result are caused by the complex program content of the cheating program. The inventor finds that, for a specific network game, on the one hand, only a small number of players can use the cheating program when playing the network game; on the other hand, the propagation of most of the cheating programs for the network game is relatively hidden, and the search engine often cannot search or searches a small amount of information of the cheating programs corresponding to the network game.
Based on the above, the basic idea of the present invention is to count the number of identical target programs on each terminal device running a target game, to obtain the number of occurrences of each target program on a plurality of terminal devices; acquiring the number of search results of each target program; and determining whether the target program is a cheating program according to the occurrence times of the target program and the number of search results. The statistics data and the search result data of the occurrence times of the target program can be obtained by simple operation, and meanwhile, the prediction result can be more accurate by combining the statistics data and the search result data of the target program, so that whether the target program is a cheating program can be determined efficiently and accurately, and the labor cost is obviously reduced.
Having described the basic principles of the present invention, various non-limiting embodiments of the invention are specifically described below.
Fig. 1 illustrates a schematic diagram of an application scenario of a cheating program determining method according to some embodiments of the present invention. Referring to fig. 1, the application scenario includes a plurality of terminal devices 110 and a server 120. The terminal device 110 communicates with the server side 120 via a network 130. The terminal device 110 runs the target game, the terminal device 110 obtains the name set of the target program running on the terminal device 110 by using the file view command of the corresponding operating system, and the obtained name set of the target program running on each terminal device 110 is sent to the server 120. After receiving the name set of the target program running on each terminal device 110, the server 120 counts the number of identical target programs running on each terminal device 110 based on the name set of each target program, and determines the counted number of each target program. The server 120 searches the names of the target programs, obtains the number of search results corresponding to the target programs, and determines whether the target programs are cheating programs based on the statistical number of the target programs and the number of search results.
It should be noted that, the terminal device 110 may be a mobile phone, a tablet computer, a desktop computer, a portable notebook computer, a vehicle-mounted computer, or the like. The server 120 may be a physical server comprising a separate host, or a virtual server carried by a cluster of hosts, or a cloud server. The network 130 may be a wired network or a wireless network, for example, the network 130 may be a public switched telephone network (Public Switched Telephone Network, PSTN) or the internet.
The cheating program determining method according to an exemplary embodiment of the present invention will be described below with reference to the accompanying drawings in conjunction with the application scenario of fig. 1. It should be noted that the above application scenario is only shown for the convenience of understanding the spirit and principle of the present invention, and the embodiments of the present invention are not limited in any way. Rather, embodiments of the invention may be applied to any scenario where applicable.
Fig. 2 illustrates a flow diagram of a method for cheating program determination provided in accordance with some embodiments of the present invention. The cheating program determining method includes steps S210 to S240, and can be applied to the server side 120 shown in fig. 1. The following describes the method for determining the cheating program in detail with reference to the accompanying drawings, taking the application of the method for determining the cheating program to the server side 120 as an example.
Referring to fig. 2, in step S210, names of target programs running on respective terminal devices, which are programs running while the terminal devices run a target game, are acquired.
In an example embodiment, a set of names of object programs running on the terminal devices, which are programs running while the terminal devices run the object game, is received at the server side 120, which is transmitted from each terminal device. On the terminal device side, the name set of the target program running on the terminal device can be obtained through a common command of an operating system, and for example, the android operating system can be switched to/proc folder through a cd/proc command to obtain the name set of the program being executed. Further, the received name set of the target program sent by the terminal device is stored in a database, and the name set of the target program running on each terminal device is acquired from the database when needed.
For example, the object programs running on the terminal device a running the object game include a program a, a program b, and a program c; the target program running on the terminal equipment B comprises a program c, a program d and a program f; the target program running on the terminal equipment C comprises a program C, a program f and a program h, and the identification of the terminal equipment and the corresponding program set are stored in a Redis database in the form of key value pairs, wherein the identification A, B, C of the terminal equipment is a key value, the corresponding program name set { a, b, C }, { C, d, f }, { C, f, h } is a value, and the name set of the target program running on each terminal equipment is obtained from the Redis database based on the key value which is the identification of each terminal equipment when needed.
In step S220, statistics is performed on the number of occurrences of the target program on each terminal device based on the names of each target program, respectively, to obtain a statistics number corresponding to each target program.
In an exemplary embodiment, the number of occurrences of the same target program on each terminal device is counted based on the name of each target program, that is, the number of occurrences of the target program in the program name set of each terminal device is counted, so as to obtain the statistics data corresponding to each target program. For example, the program a, b, d, h appears 1 time in the name set of each target program, and the corresponding statistical number is 1; the number of times of the program f in the name set of each target program is 2, and the corresponding statistical number is 2; the number of occurrences of program c in the name set of each target program is 3, and the corresponding statistical number is 3.
In step S230, the number of search results corresponding to the names of the respective target programs is acquired.
In some example embodiments, the names of the respective target programs are searched by a search engine or an application database, and the number of search results corresponding to the names of the respective target programs is determined based on the search results. In other example embodiments, the name of the target program and the name of the target game are searched by a search engine or an application database, and the number of search results corresponding to the name of the target program is determined based on the search results. The search engine may be a conventional search engine, for example, a search engine such as a hundred degrees search engine, a dog search engine, etc., and the application database may be a conventional application store or a software download website, which is not limited in particular by the present invention.
In step S240, it is determined whether the target program is a cheating program based on the statistical number corresponding to the target program and the search result number.
In some example embodiments, if the statistical number corresponding to the target program is less than a first threshold and the number of search results corresponding to the target program is less than a second threshold, the target program is determined to be a cheating program, the first threshold may be determined according to the total number of players of the target game, and the second threshold may be determined according to the number of search results of other cheating programs corresponding to the target game, for example, taking an average of the number of search results of the plurality of cheating programs.
In other embodiments, a weighted sum operation is performed on the number of statistics and the number of search results corresponding to the target program; and determining the target program as the cheating program based on the result of the weighted summation operation. For example, let the statistical number corresponding to the target program be a, the search result number corresponding to the target program be b, the weight corresponding to the statistical number a be k1, the weight corresponding to the search result number b be k2, and the sum of k1 and k2 be 1, S be the result of the weighted sum operation of the statistical number a and the search result number b, and the value of S be determined by the following formula (1):
S＝k1*a+k2*b (1)
if S is smaller than the predetermined threshold S1, the target program is determined to be a cheating program, where the predetermined threshold S1 is an empirical value obtained according to the statistical number of the plurality of cheating programs corresponding to the target game and the number of search results, and in an exemplary embodiment, k1=0.15, k2=0.85, s1=10, if the statistical number a=100 and the number b=20 of the target program, s=32, S is far greater than S1, which indicates that the target program is a cheating program with a small probability.
According to the technical solution in the exemplary embodiment of fig. 2, on the one hand, counting the occurrence times of the same target program running on each terminal device running the target game can efficiently determine the occurrence times of each target program on a plurality of terminal devices; on the other hand, whether the target program is the cheating program is determined by combining the counted occurrence times of the target program and the search result number, and the program content of the target program is not required to be analyzed, so that whether the target program is the cheating program can be determined efficiently and accurately, and the labor cost is obviously reduced.
Further, in still other example embodiments, determining whether the target program is a cheating program based on the corresponding statistics number of target programs and the number of search results includes: determining the probability that the target program is a cheating program according to the following formula (2) based on the corresponding statistical number of the target program and the number of the search results,
P＝1-K1*min(a/A,1)-K2*min(b/B,1) (2)
wherein P is the probability that the target program is a cheating program, a is the statistical number, B is the search result number, A is an empirical value corresponding to the statistical number, B is an empirical value corresponding to the search result number, K1 is a weight corresponding to the statistical number, K2 is a weight corresponding to the search result number, and K2 is greater than K1, and the sum of K1 and K2 is equal to 1. In an exemplary embodiment, K1 is 0.15, K2 is 0.85, a is 300, b is 10, then p=1-0.15×min (a/300,1) -0.85×min (b/10, 1), if the statistical number a of the target program is equal to 100 and the number b of the search results is equal to 20, then p=1-0.05-0.85=0.1, which indicates that the target program is a cheating program with a relatively small probability.
Fig. 3 is a schematic flow chart of verification of a target program according to some embodiments of the invention.
Referring to fig. 3, in step S310, if it is determined that the target program is the cheating program to be verified, the program information of the cheating program to be verified, which is searched, is obtained, and the program information includes one or more of name information of the cheating program to be verified, description information of the cheating program to be verified, and comment information of the cheating program to be verified.
In an example embodiment, the cheating program to be verified indicates that the target program is a greater probability of being a cheating program or that the target program has been determined to be a cheating program. The program information of the searched cheating program to be verified is obtained, and the program information can comprise one or more of name information of the cheating program to be verified, description information of the cheating program to be verified and comment information of the cheating program to be verified.
In step S320, whether the cheating program to be verified is a cheating program is verified based on the program information of the cheating program to be verified.
In an example embodiment, performing word segmentation on program information of the cheating program to be verified to obtain a corresponding word vector; determining the similarity between each word vector and each word vector of program information of a preset cheating program; determining a target word vector with similarity greater than a predetermined similarity threshold; if the number of the target word vectors is greater than a predetermined number threshold, determining that the cheating program to be verified is the cheating program, wherein the predetermined number threshold is determined according to common words of the cheating program corresponding to the target game. For example, the name information of the program information of the cheating program often includes the name of the target game, the description information of the program includes the operation information of the target game, such as "hang up", "infinite", "script", "automatic", "timing", and the like, and if the word vector of the program information of the cheating program to be verified includes a plurality of common words corresponding to the cheating program, the cheating program to be verified is determined to be the cheating program.
In the example embodiment of fig. 3, whether the target program is the cheating program is verified through the program information of the target program, so that the accuracy of predicting the cheating program can be further improved, and the efficiency of predicting the cheating program can be improved only by acquiring the program information of the target program from the search result without directly analyzing the program content of the target program.
Fig. 4 is a schematic flow chart of verification of a target program according to other embodiments of the present invention.
Referring to fig. 4, in step S410, if it is determined that the target program is the cheating program to be verified, operation data of the cheating program to be verified on each terminal device is obtained.
In an example embodiment, the cheating program to be verified indicates that the target program is a greater probability of being a cheating program or that the target program has been determined to be a cheating program. And acquiring operation data of the cheating program to be verified on the terminal equipment from a game log of the target game. The operation data of the cheating program to be verified on each terminal device represents the operation data of the program in the use of the target game, for example, the operation data of the cheating program to be verified can comprise blood adding, blue adding, treatment, attack, output skills, equipment outputting and other operation data.
In step S420, the operation data of the cheating program to be verified is compared with the standard operation data corresponding to the target game.
In an example embodiment, required operation data is extracted from operation data of a cheating program to be verified according to a regular expression, and the extracted operation data is compared with standard operation data corresponding to a target game. For example, the data of "blood adding" and "blue adding" are extracted from the operation data of the cheating program to be verified, and the extracted operation data are compared with the standard data value corresponding to the target game.
In step S430, it is verified whether the cheating program to be verified is a cheating program based on the comparison result.
In an example embodiment, based on a comparison result of operation data of the cheating program to be verified and standard operation data corresponding to the target game, verifying whether the cheating program to be verified is the cheating program. For example, if the blood adding operation of the target game adds 20% at a time and the blood adding operation triggered by the cheating program to be verified adds 50% at a time, the cheating program to be verified is determined to be the cheating program.
In the example embodiment of fig. 4, whether the target program is the cheating program is verified through the operation data of the target program, so that the accuracy of predicting the cheating program can be further improved, and the efficiency of predicting the cheating program can be improved only by acquiring the operation data of the target program from the game log without directly analyzing the program content of the target program.
Fig. 5 illustrates a schematic block diagram of a cheating program determining apparatus provided according to some embodiments of the present invention. Referring to fig. 5, the cheating program determining apparatus 500 includes: a name acquisition module 510, a name statistics module 520, a search result determination module 530, and a cheating determination module 540. The name acquisition module 510 is configured to acquire names of target programs running on each terminal device, where the target programs are programs running while the terminal device runs a target game; the name statistics module 520 is configured to respectively count the occurrence times of the target program on each terminal device based on the name of each target program, so as to obtain a statistics number corresponding to each target program; the search result determining module 530 is configured to obtain the number of search results corresponding to the name of each target program; the cheating determining module 540 is configured to determine whether the target program is a cheating program based on the statistics number and the search result number corresponding to the target program.
In some embodiments of the present invention, based on the above-described scheme, referring to fig. 6, the cheating determining module 540 includes: a weighting operation unit 610, configured to perform a weighted summation operation on the number of statistics and the number of search results corresponding to the target program; and a result determining unit 620, configured to determine that the target program is a cheating program if the result of the weighted sum operation is less than a predetermined threshold.
In some embodiments of the invention, based on the above-described scheme, the cheating determination module is configured to: determining the probability that the target program is a cheating program based on the statistics number corresponding to the target program and the search result number by the following formula,
P＝1-K1*min(a/A,1)-K2*min(b/B,1)
wherein P is the probability that the target program is a cheating program, a is the statistical number, B is the search result number, A is an empirical value corresponding to the statistical number, B is an empirical value corresponding to the search result number, K1 is a weight corresponding to the statistical number, K2 is a weight corresponding to the search result number, and K2 is greater than K1.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the information acquisition module is used for acquiring the program information of the searched cheating program to be verified if the target program is determined to be the cheating program to be verified, wherein the program information comprises one or more of name information of the cheating program to be verified, description information of the cheating program to be verified and comment information of the cheating program to be verified; and the verification module is used for verifying whether the cheating program to be verified is a cheating program or not based on the program information.
In some embodiments of the present invention, based on the above scheme, the verification module includes: the word vector generation unit is used for carrying out word segmentation on the program information of the cheating program to be verified to obtain a corresponding word vector; a similarity determining unit configured to determine a similarity between each of the word vectors and each of the word vectors of program information of a predetermined cheating program; determining a target word vector with the similarity greater than a predetermined similarity threshold; and the threshold judging unit is used for determining that the cheating program to be verified is a cheating program if the number of the target word vectors is larger than a preset number threshold.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the operation data acquisition module is used for acquiring operation data of the cheating program to be verified on each terminal device if the target program is determined to be the cheating program to be verified; the data comparison unit is used for comparing the operation data with standard operation data corresponding to the target game; and the result verification unit is used for verifying whether the cheating program to be verified is the cheating program or not based on the comparison result.
In some embodiments of the present invention, based on the above-mentioned scheme, the apparatus further includes: the name searching module is used for searching the names of the target programs through a search engine or an application program database; and the number determining module is used for determining the number of the search results corresponding to the names of the target programs based on the search results.
According to the cheating program determining apparatus in the example embodiment of fig. 5, on the one hand, counting the number of occurrences of the same target program being run on each terminal device running the target game can efficiently determine the number of occurrences of each target program on a plurality of terminal devices; on the other hand, search result data corresponding to the names of all target programs are obtained, and whether the target programs are cheating programs or not is determined by combining the counted occurrence times of the target programs and the number of the search results, so that whether the target programs are cheating programs or not can be determined efficiently and accurately, and the labor cost is reduced remarkably.
The cheating program determining device provided by the embodiment of the application can realize each process in the embodiment of the method and achieve the same functions and effects, and is not repeated here.
Fig. 7 is a schematic structural diagram of an embodiment one of a cheating program determining apparatus according to some embodiments of the present invention, and as shown in fig. 7, the cheating program determining apparatus 700 according to this embodiment may include: receiver 710, memory 720, processor 730, and transmitter 740.
Optionally, the cheating program determination device may further include a bus. Wherein the bus is used for realizing the connection between the elements.
The memory is used for storing computer programs and data, and the processor calls the computer programs stored in the memory to execute the technical scheme of the cheating program determining method provided by any one of the method embodiments.
Wherein the memory and the processor are electrically connected directly or indirectly to each other for data transmission or interaction. For example, the elements may be electrically connected to each other via one or more communication buses or signal lines, such as through a bus connection. The memory stores computer-executable instructions for implementing the data access control method, including at least one software functional module that may be stored in the memory 201 in the form of software or firmware, and the processor executes various functional applications and data processing by running computer programs and modules stored in the memory.
The Memory may be, but is not limited to, random access Memory (Random Access Memory; RAM), read Only Memory (ROM), programmable Read Only Memory (Programmable Read-Only Memory; PROM), erasable Read Only Memory (Erasable Programmable Read-Only Memory; EPROM), electrically erasable Read Only Memory (Electric Erasable Programmable Read-Only Memory; EEPROM), etc. The memory is used for storing a program, and the processor executes the program after receiving the execution instruction. Further, the software programs and modules within the memory may also include an operating system, which may include various software components and/or drivers for managing system tasks (e.g., memory management, storage device control, power management, etc.), and may communicate with various hardware or software components to provide an operating environment for other software components.
The processor may be an integrated circuit chip with signal processing capabilities. The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, abbreviated as CPU), a network processor (Network Processor, abbreviated as NP), and the like. The disclosed methods, steps, and logic blocks in the embodiments of the present invention may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. It will be appreciated that the configuration of fig. 7 is illustrative only and may include more or fewer components than shown in fig. 7 or have a different configuration than shown in fig. 7. The components shown in fig. 7 may be implemented in hardware and/or software.
The embodiment of the invention also provides a computer readable storage medium, on which a computer program is stored, which when executed by a processor can implement the cheating program determining method provided by any of the above method embodiments.
The computer readable storage medium in this embodiment may be any available medium that can be accessed by a computer or a data storage device such as a server, a data center, etc. that contains one or more available medium(s) integrated, and the available medium may be a magnetic medium, (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., an SSD), etc.
Those of ordinary skill in the art will appreciate that: all or part of the steps for implementing the method embodiments described above may be performed by hardware associated with program instructions. The foregoing program may be stored in a computer readable storage medium. The program, when executed, performs steps including the method embodiments described above; and the aforementioned storage medium includes: various media that can store program code, such as ROM, RAM, magnetic or optical disks.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present invention, and not for limiting the same; although the invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some or all of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit of the invention.
Claims (9)
1. A method for determining a cheating program, comprising:
acquiring the names of target programs running on each terminal device, wherein the target programs are programs running at the same time when the terminal device runs a target game;
counting the occurrence times of the target programs on the terminal equipment based on the names of the target programs to obtain the corresponding counting number of the target programs;
acquiring the number of search results corresponding to the names of the target programs;
carrying out weighted summation operation on the statistical number corresponding to the target program and the search result number;
and if the result of the weighted summation operation is smaller than a preset threshold value, determining that the target program is a cheating program.
2. The method of claim 1, wherein the statistical number and the search result number corresponding to the target program are weighted and summed; if the result of the weighted sum operation is smaller than a predetermined threshold, determining that the target program is a cheating program comprises:
determining the probability that the target program is a cheating program based on the statistics number corresponding to the target program and the search result number by the following formula,
P＝1-K1*min(a/A,1)-K2*min(b/B,1)
wherein P is the probability that the target program is a cheating program, a is the statistical number, B is the search result number, A is an empirical value corresponding to the statistical number, B is an empirical value corresponding to the search result number, K1 is a weight corresponding to the statistical number, K2 is a weight corresponding to the search result number, and K2 is greater than K1.
3. The method according to claim 1 or 2, characterized in that the method further comprises:
if the target program is determined to be the cheating program to be verified, acquiring the searched program information of the cheating program to be verified, wherein the program information comprises one or more of name information of the cheating program to be verified, description information of the cheating program to be verified and comment information of the cheating program to be verified;
and verifying whether the cheating program to be verified is the cheating program based on the program information.
4. The method of claim 3, wherein verifying whether the cheating program to be verified is a cheating program based on the program information comprises:
performing word segmentation processing on the program information of the cheating program to be verified to obtain a corresponding word vector;
determining the similarity between each word vector and each word vector of program information of a preset cheating program;
determining a target word vector with the similarity greater than a predetermined similarity threshold;
and if the number of the target word vectors is greater than a preset number threshold, determining that the cheating program to be verified is a cheating program.
5. The method according to claim 1 or 2, characterized in that the method further comprises:
if the target program is determined to be the cheating program to be verified, acquiring operation data of the cheating program to be verified on each terminal device;
comparing the operation data with standard operation data corresponding to the target game;
and verifying whether the cheating program to be verified is the cheating program based on the comparison result.
6. The method according to claim 1, wherein the method further comprises:
searching the name of each target program through a search engine or an application program database;
the number of search results corresponding to the name of each of the target programs is determined based on the search results.
7. A cheating program determining apparatus, comprising:
the name acquisition module is used for acquiring names of target programs running on each terminal device, wherein the target programs are programs running at the same time when the terminal device runs a target game;
the name statistics module is used for respectively counting the occurrence times of the target programs on the terminal equipment based on the names of the target programs to obtain the corresponding statistics numbers of the target programs;
the search result determining module is used for obtaining the number of search results corresponding to the names of the target programs;
the cheating determining module is used for determining whether the target program is a cheating program or not based on the statistical number corresponding to the target program and the search result number;
the cheating determination module comprises: the weighting operation unit is used for carrying out weighted summation operation on the statistical number corresponding to the target program and the search result number; and the determining unit is used for determining that the target program is a cheating program if the result of the weighted summation operation is smaller than a preset threshold value.
8. A cheating program determining apparatus, comprising:
a receiver, a processor, a memory, and a transmitter;
the memory is used for storing a computer program and data, and the processor calls the computer program stored in the memory to execute the cheating program determining method according to any one of claims 1 to 6.
9. A computer readable storage medium, characterized in that the computer readable storage medium comprises a computer program for performing the cheating program determination method of any one of claims 1 to 6 when being executed by a processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911066373.8A CN110801630B (en) | 2019-11-04 | 2019-11-04 | Method, device, equipment and storage medium for determining cheating program |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911066373.8A CN110801630B (en) | 2019-11-04 | 2019-11-04 | Method, device, equipment and storage medium for determining cheating program |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110801630A CN110801630A (en) | 2020-02-18 |
| CN110801630B true CN110801630B (en) | 2023-07-25 |
Family
ID=69501054
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911066373.8A Active CN110801630B (en) | 2019-11-04 | 2019-11-04 | Method, device, equipment and storage medium for determining cheating program |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110801630B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111569433B (en) * | 2020-05-11 | 2023-09-12 | 上海米哈游天命科技有限公司 | Game cheating detection method, device, equipment and storage medium |
Family Cites Families (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8529343B2 (en) * | 2011-07-27 | 2013-09-10 | Cyber Holdings, Inc. | Method for monitoring computer programs |
| RU2595511C2 (en) * | 2014-12-05 | 2016-08-27 | Закрытое акционерное общество "Лаборатория Касперского" | System and method of trusted applications operation in the presence of suspicious applications |
| CN105824834B (en) * | 2015-01-06 | 2020-09-11 | 腾讯科技（深圳）有限公司 | Search traffic cheating behavior identification method and device |
| US10427048B1 (en) * | 2015-03-27 | 2019-10-01 | Electronic Arts Inc. | Secure anti-cheat system |
| CN105184162B (en) * | 2015-08-18 | 2019-01-04 | 安一恒通（北京）科技有限公司 | program monitoring method and device |
| CN106485507B (en) * | 2015-09-01 | 2019-10-18 | 阿里巴巴集团控股有限公司 | A kind of software promotes the detection method of cheating, apparatus and system |
| CN110071924B (en) * | 2019-04-24 | 2020-07-31 | 武汉武房网信息服务有限公司 | Big data analysis method and system based on terminal |
| CN110365682B (en) * | 2019-07-17 | 2021-09-17 | 秒针信息技术有限公司 | Anti-cheating method and device |
-
2019
- 2019-11-04 CN CN201911066373.8A patent/CN110801630B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN110801630A (en) | 2020-02-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109078333B (en) | Method and device for matching game friends | |
| CN111090807B (en) | Knowledge graph-based user identification method and device | |
| CN110704677B (en) | Program recommendation method and device, readable storage medium and terminal equipment | |
| WO2017045532A1 (en) | Application program classification display method and apparatus | |
| CN113381963B (en) | Domain name detection method, device and storage medium | |
| CN109194689A (en) | Abnormal behaviour recognition methods, device, server and storage medium | |
| CN113383362A (en) | User identification method and related product | |
| CN106998336B (en) | Method and device for detecting user in channel | |
| WO2015014260A1 (en) | Data processing method and server therefor | |
| CN110801630B (en) | Method, device, equipment and storage medium for determining cheating program | |
| CN116938776A (en) | Method, device, electronic equipment and medium for network asset mapping | |
| CN115037790B (en) | Abnormal registration identification method, device, equipment and storage medium | |
| CN111027065A (en) | Lesovirus identification method and device, electronic equipment and storage medium | |
| CN114338102B (en) | Security detection method, security detection device, electronic equipment and storage medium | |
| CN110674839B (en) | Abnormal user identification method and device, storage medium and electronic equipment | |
| CN114330287A (en) | Pseudo processing method and device for sensitive data in heterogeneous network and related product | |
| CN110297989B (en) | Test method, device, equipment and medium for anomaly detection | |
| CN114065187A (en) | Abnormal login detection method and device, computing equipment and storage medium | |
| CN108875363B (en) | Method and device for accelerating virtual execution, electronic equipment and storage medium | |
| CN113791837A (en) | Page processing method, device, equipment and storage medium | |
| CN113010785A (en) | User recommendation method and device | |
| CN111461118A (en) | Interest feature determination method, device, equipment and storage medium | |
| CN111459540A (en) | Hardware performance improvement suggestion method and device and electronic equipment | |
| CN110688319A (en) | Application keep-alive capability test method and related device | |
| CN112261484B (en) | Target user identification method and device, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |